Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/ub56r7H7-3iggJpTpOzXHvDTxn0.roa
File: ub56r7H7-3iggJpTpOzXHvDTxn0.roa (raw, json)
Hash identifier: uVGRkYnSS2ATLyatSFreKhOQxpj7oYU3yY4RQiVW6/o=
Subject key identifier: B9:BE:7A:AF:B1:FB:FB:78:A0:80:9A:53:A4:EC:D7:1E:F0:D3:C6:7D
Certificate issuer: /CN=0557d7d128b93b8ef0654a86518aa1c10504aa50
Certificate serial: 018AFA3CB85D1C5ADCF692B20440067889CA
Authority key identifier: 05:57:D7:D1:28:B9:3B:8E:F0:65:4A:86:51:8A:A1:C1:05:04:AA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVfX0Si5O47wZUqGUYqhwQUEqlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/ub56r7H7-3iggJpTpOzXHvDTxn0.roa
Signing time: Wed 04 Oct 2023 10:29:57 +0000
ROA not before: Wed 04 Oct 2023 10:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20162019
IP address blocks: 2a13:f740::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:3c:b8:5d:1c:5a:dc:f6:92:b2:04:40:06:78:89:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0557d7d128b93b8ef0654a86518aa1c10504aa50
Validity
Not Before: Oct 4 10:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9be7aafb1fbfb78a0809a53a4ecd71ef0d3c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:85:ac:ed:c1:a3:e0:b0:a4:ae:ef:35:65:
e1:5a:73:0c:ec:61:6c:c5:2d:f1:b9:bb:d1:2b:a4:
c0:df:f7:4b:97:b1:54:bd:31:b6:64:94:cd:74:5f:
b1:82:2f:ad:13:5a:03:27:d2:b8:91:0a:a7:76:cd:
b2:9b:4e:5d:be:d6:09:1c:ce:00:dd:57:cf:8b:37:
b0:eb:8d:58:05:34:5f:69:5f:77:e2:b5:31:f5:0d:
9b:2f:ac:74:66:fe:36:23:5c:2d:8f:9a:ec:f6:b6:
bc:d6:c3:c3:6c:be:85:12:f7:d6:7a:7c:5a:48:c0:
4c:b4:df:8b:69:18:1a:7a:4d:f7:05:0a:07:f7:90:
ec:03:a4:27:73:a8:ba:64:5a:41:2a:6a:d9:74:e7:
4a:b1:3d:1d:9c:38:da:65:8c:06:4b:c9:21:9b:0b:
85:44:9c:e2:64:51:b5:71:46:fb:2f:d3:9c:df:83:
eb:8f:01:87:a1:cd:fa:31:5d:79:3f:e2:e8:bc:b1:
7b:fc:83:83:7e:d7:d7:6d:68:4e:51:db:a1:02:1b:
07:89:78:19:4f:2c:ab:48:ce:cc:e5:dd:e4:97:da:
96:e0:ff:65:63:3d:4f:b2:e9:79:a9:d6:c4:fb:a3:
65:eb:8e:0c:40:34:98:01:e3:6a:50:97:0c:d0:45:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:7A:AF:B1:FB:FB:78:A0:80:9A:53:A4:EC:D7:1E:F0:D3:C6:7D
X509v3 Authority Key Identifier:
keyid:05:57:D7:D1:28:B9:3B:8E:F0:65:4A:86:51:8A:A1:C1:05:04:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVfX0Si5O47wZUqGUYqhwQUEqlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/ub56r7H7-3iggJpTpOzXHvDTxn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/BVfX0Si5O47wZUqGUYqhwQUEqlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f740::/48
Signature Algorithm: sha256WithRSAEncryption
c7:59:62:b8:93:26:c9:ee:91:ef:24:5f:fd:85:e6:b3:a2:f4:
4c:94:03:c8:86:0c:27:a5:44:51:cc:fc:1e:14:25:7f:75:d7:
d9:21:ee:90:8e:94:a8:e1:fa:de:b5:aa:cc:b2:2e:b2:32:bb:
6a:94:08:8a:cd:3f:18:14:44:5f:c0:4b:8b:94:57:7e:3a:f1:
41:2f:6b:0f:eb:6d:22:90:24:0b:2c:ee:32:f3:7c:c4:12:69:
aa:8d:23:66:5b:fd:04:a7:c4:32:92:81:f0:14:b2:ec:d8:45:
46:cc:19:e7:a4:6a:ee:5f:dd:6b:64:6c:c8:cf:ea:a8:47:ba:
9d:56:0f:df:27:3e:32:04:df:e2:62:17:a9:bb:b1:07:9a:12:
dd:3c:40:83:8d:ba:cf:71:d4:cc:94:a4:a0:73:2b:a8:90:f8:
ba:fc:11:88:d3:0a:1e:9a:2b:bd:40:a8:07:42:7a:a8:79:02:
b1:29:84:2c:77:d7:1e:d6:57:b9:7d:e4:f1:4d:d5:29:31:26:
a9:5b:2f:6c:c8:91:61:39:df:e5:a7:5a:bd:cb:24:bd:42:67:
45:01:47:9d:28:29:ea:fc:44:73:a0:7d:77:db:27:34:86:d2:
9d:55:4b:2c:13:d6:99:ab:c2:86:08:66:5d:7b:e3:2d:d3:bd:
f5:b0:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:53 2024 by rpki-client on console-ams.rpki-client.org